Generating false data for suspicious users

Abstract

A method, computer program product and system for generating false data for suspicious users. A suspicious user is identified. Actions of the user are then tracked. The user attempting to access sensitive information is detected. Relevant false sensitive information corresponding to the sensitive information is then detected. The relevant false sensitive information is then mapped to the sensitive information. The relevant false sensitive information is provided to the suspicious user. In response to user input, at least one command is executed, where the at least one command includes the relevant false sensitive information and not the sensitive information.

The invention claimed is: 
     
       1. A computer program product for generating false data for suspicious users, the computer program product comprising one or more computer readable storage mediums having program code embodied therewith, the program code comprising the programming instructions for:
 detecting that a user attempts to access sensitive information; 
 detecting relevant false sensitive information corresponding to the sensitive information; 
 mapping the relevant false sensitive information to the sensitive information; 
 executing at least one command, in response to user input, wherein the at least one command comprises the relevant false sensitive information and not the sensitive information; and 
 determining whether to block a transmission of the relevant false sensitive information, redact the relevant false sensitive information or allow the relevant false sensitive information to be transmitted based on characteristics associated with the user. 
 
     
     
       2. The computer program product as recited in  claim 1 , wherein the characteristics indicate whether a user has permission to access: the corresponding sensitive information from a particular local device or remote device that hosts the sensitive information, a file name corresponding to the sensitive information on the host device, a creation date of the sensitive information on the host device, and administrative access to the sensitive information on the host device. 
     
     
       3. The computer program product as recited in  claim 1 , wherein the program code further comprises the programming instructions for:
 blocking the transmission of the relevant false sensitive information to an external source. 
 
     
     
       4. The computer program product as recited in  claim 1 , wherein the program code further comprises the programming instructions for:
 redacting the relevant false sensitive information in a transmission to an external source. 
 
     
     
       5. The computer program product as recited in  claim 1 , wherein the program code further comprises the programming instructions for:
 allowing transmission of the relevant false sensitive information to an external source in response to detecting that the relevant false sensitive information does not include the sensitive information. 
 
     
     
       6. The computer program product as recited in  claim 1 , wherein the program code further comprises the programming instructions for:
 detecting the relevant false sensitive information corresponding to the sensitive information from an external database. 
 
     
     
       7. The computer program product as recited in  claim 1 , wherein the program code further comprises the programming instructions for:
 generating the relevant false sensitive information with a machine learning technique. 
 
     
     
       8. The computer program product as recited in  claim 1 , wherein the at least one command comprises encrypting the relevant false sensitive information, transmitting the relevant false sensitive information to an external storage device, copying the relevant false sensitive information to a separate location in local storage, or any combination thereof. 
     
     
       9. The computer program product as recited in  claim 1 , wherein the program code further comprises the programming instructions for:
 adding a watermark to metadata of a file in response to detecting the relevant false sensitive information being added to the file, wherein the watermark comprises an indicator that indicates a presence of relevant false sensitive information. 
 
     
     
       10. The computer program product as recited in  claim 1 , wherein the program code further comprises the programming instructions for:
 instructing an external database to create a table comprising the mapping of the relevant false sensitive information to the sensitive information and a watermark indicator. 
 
     
     
       11. A system, comprising:
 a memory for storing a computer program for generating false data for suspicious users; and 
 a processor connected to the memory, wherein the processor is configured to execute the program instructions of the computer program comprising:
 detecting that a user attempts to access sensitive information; 
 detecting relevant false sensitive information corresponding to the sensitive information; 
 mapping the relevant false sensitive information to the sensitive information; 
 executing at least one command, in response to user input, wherein the at least one command comprises the relevant false sensitive information and not the sensitive information; and 
 determining whether to block a transmission of the relevant false sensitive information, redact the relevant false sensitive information or allow the relevant false sensitive information to be transmitted based on characteristics associated with the user. 
 
 
     
     
       12. The system as recited in  claim 11 , wherein the characteristics indicate whether a user has permission to access: the corresponding sensitive information from a particular local device or remote device that hosts the sensitive information, a file name corresponding to the sensitive information on the host device, a creation date of the sensitive information on the host device, and administrative access to the sensitive information on the host device. 
     
     
       13. The system as recited in  claim 11 , wherein the program instructions of the computer program further comprise:
 blocking the transmission of the relevant false sensitive information to an external source. 
 
     
     
       14. The system as recited in  claim 11 , wherein the program instructions of the computer program further comprise:
 redacting the relevant false sensitive information in a transmission to an external source. 
 
     
     
       15. The system as recited in  claim 11 , wherein the program instructions of the computer program further comprise:
 allowing transmission of the relevant false sensitive information to an external source in response to detecting that the relevant false sensitive information does not include the sensitive information. 
 
     
     
       16. The system as recited in  claim 11 , wherein the program instructions of the computer program further comprise:
 detecting the relevant false sensitive information corresponding to the sensitive information from an external database. 
 
     
     
       17. The system as recited in  claim 11 , wherein the program instructions of the computer program further comprise:
 generating the relevant false sensitive information with a machine learning technique. 
 
     
     
       18. The system as recited in  claim 11 , wherein the at least one command comprises encrypting the relevant false sensitive information, transmitting the relevant false sensitive information to an external storage device, copying the relevant false sensitive information to a separate location in local storage, or any combination thereof. 
     
     
       19. The system as recited in  claim 11 , wherein the program instructions of the computer program further comprise:
 adding a watermark to metadata of a file in response to detecting the relevant false sensitive information being added to the file, wherein the watermark comprises an indicator that indicates a presence of relevant false sensitive information. 
 
     
     
       20. The system as recited in  claim 11 , wherein the program instructions of the computer program further comprise:
 instructing an external database to create a table comprising the mapping of the relevant false sensitive information to the sensitive information and a watermark indicator.